$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a40f4963-3da7-322d-b0b6-4ad887798e20.roa File: a40f4963-3da7-322d-b0b6-4ad887798e20.roa (raw, json) Hash identifier: MQQ54oZSaH19nh/OSV5U2INSkhBKO0OZCwBZZF7ZfX4= Subject key identifier: 23:D5:A3:B2:F9:D1:5A:E9:3C:AC:19:DF:48:C3:83:4D:88:F3:5A:3B Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F0D6CDA2B25715FB418D9C4A0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a40f4963-3da7-322d-b0b6-4ad887798e20.roa Signing time: Thu 03 Sep 2026 13:00:12 +0000 ROA not before: Thu 03 Sep 2026 13:00:12 +0000 ROA not after: Wed 02 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 2603:c011::/36 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0d:6c:da:2b:25:71:5f:b4:18:d9:c4:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 3 13:00:12 2026 GMT Not After : Dec 2 14:00:12 2026 GMT Subject: CN=27a1081c-b0d4-463f-b762-fa828e3a57e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:00:d8:07:bc:29:ea:64:c3:13:96:74:a6:5a: 83:9d:f2:4c:e3:8a:5b:50:37:94:c7:8e:02:85:42: 3e:63:ca:d2:05:56:00:69:e4:44:dd:02:de:0a:fa: 0c:ca:e6:00:c3:70:23:96:6e:01:7a:c5:68:5f:26: c4:fd:f8:31:70:d8:20:50:7b:f6:10:17:63:71:e6: c9:04:23:b5:cf:9b:6f:47:5b:d1:58:79:a8:00:a9: e8:a5:3f:b2:b9:8d:18:ce:54:eb:40:07:c5:34:88: 8a:63:99:85:e7:90:e3:c8:1a:12:25:92:54:1a:f0: 44:f2:9e:f7:a0:f4:d0:b2:c9:ef:b5:3e:26:ac:60: 90:30:e6:02:cf:e3:9f:5a:72:cf:d3:74:5c:e5:7e: 8a:7c:47:4e:2f:ed:bc:a3:50:c6:32:28:71:aa:ab: 04:3b:ce:8c:b9:c6:bc:e6:23:15:97:a6:7b:8e:a8: 41:c7:29:4e:51:68:ad:cf:49:36:95:a2:b7:df:84: ef:44:27:16:ea:b6:fe:55:df:38:aa:ae:e9:fc:5f: 2c:61:47:af:2d:a4:c7:03:ae:af:9b:a2:c2:27:7d: 9f:bf:d7:29:22:2e:5e:5b:01:22:7e:f8:83:10:94: ad:6c:b9:80:43:24:4f:25:61:3a:c7:17:90:11:c1: 02:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:D5:A3:B2:F9:D1:5A:E9:3C:AC:19:DF:48:C3:83:4D:88:F3:5A:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a40f4963-3da7-322d-b0b6-4ad887798e20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv6: 2603:c011::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:59:21:ea:99:67:4d:56:57:3c:e7:a2:b9:ef:5c:7f:35:37: 2d:93:5c:8e:b1:6f:5c:f0:6f:6d:0f:7a:f2:83:01:d5:3f:8f: a4:e4:a8:66:30:52:ca:3f:a5:5f:70:0f:89:ba:fe:ce:0b:1f: 74:fa:9f:4a:61:9f:aa:5b:0f:a6:17:3e:69:9e:ed:e9:b2:9d: fc:f4:36:3c:ee:28:34:3a:67:e6:0c:96:42:7f:9f:a1:73:8c: e0:40:d7:d7:88:c5:dc:f1:6a:bf:4b:58:8c:50:e9:2a:94:86: d7:79:36:1b:3a:42:83:17:ce:b9:22:55:aa:a5:ac:9c:77:a0: 72:51:40:58:93:45:f0:df:15:7e:83:c7:59:62:63:6e:c2:1e: fe:2a:78:3e:d1:71:2a:d1:e1:e9:4e:38:c8:98:3d:2d:10:4f: 8a:30:ce:bb:29:65:9c:e2:26:b2:1a:5c:85:7e:ba:50:79:19: 52:a8:21:14:9f:54:73:b2:4f:8c:f3:59:8a:2b:90:1f:ad:0c: be:1c:80:c1:c1:c2:f6:6c:34:d9:ed:6d:34:27:e8:5f:8f:d4: c0:ef:21:f1:df:ad:26:fc:d1:14:b5:22:cc:8e:f5:df:17:40: f6:e0:3a:4d:56:a0:29:8a:03:64:77:46:fa:3e:0b:89:d9:62: ae:da:03:55 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE8NbNorJXFftBjZxKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwMzEzMDAxMloXDTI2MTIwMjE0MDAxMlowLzEtMCsGA1UEAxMk MjdhMTA4MWMtYjBkNC00NjNmLWI3NjItZmE4MjhlM2E1N2U4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0gDYB7wp6mTDE5Z0plqDnfJM44pbUDeUx44C hUI+Y8rSBVYAaeRE3QLeCvoMyuYAw3Ajlm4BesVoXybE/fgxcNggUHv2EBdjcebJ BCO1z5tvR1vRWHmoAKnopT+yuY0YzlTrQAfFNIiKY5mF55DjyBoSJZJUGvBE8p73 oPTQssnvtT4mrGCQMOYCz+OfWnLP03Rc5X6KfEdOL+28o1DGMihxqqsEO86Muca8 5iMVl6Z7jqhBxylOUWitz0k2laK334TvRCcW6rb+Vd84qq7p/F8sYUevLaTHA66v m6LCJ32fv9cpIi5eWwEifviDEJStbLmAQyRPJWE6xxeQEcECIwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFCPVo7L50VrpPKwZ30jDg02I81o7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYTQwZjQ5NjMtM2RhNy0z MjJkLWIwYjYtNGFkODg3Nzk4ZTIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgPAEQAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAFlkh6plnTVZXPOeiue9cfzU3LZNcjrFvXPBvbQ968oMB1T+PpOSo ZjBSyj+lX3APibr+zgsfdPqfSmGfqlsPphc+aZ7t6bKd/PQ2PO4oNDpn5gyWQn+f oXOM4EDX14jF3PFqv0tYjFDpKpSG13k2GzpCgxfOuSJVqqWsnHegclFAWJNF8N8V foPHWWJjbsIe/ip4PtFxKtHh6U44yJg9LRBPijDOuyllnOImshpchX66UHkZUqgh FJ9Uc7JPjPNZiiuQH60MvhyAwcHC9mw02e1tNCfoX4/UwO8h8d+tJvzRFLUizI71 3xdA9uA6TVagKYoDZHdG+j4LidlirtoDVQ== -----END CERTIFICATE-----Generated at Tue Sep 22 10:56:01 2026 by rpki-client